~ / search / GHSA-4qf5-7xc2-wqpg

GHSA-4qf5-7xc2-wqpg

DNN Path Traversal via Zip Slip

Source: GitHub Advisory Database (reviewed) High CVE-2020-5187

Packages

EcosystemPackageAffectedFixed in
NuGet DotNetNuke.Core < 9.5.0 9.5.0

Details

As written in the advisory (Markdown source, shown as plain text).

DNN (formerly DotNetNuke) through 9.4.4 allows Path Traversal via unsafe handling of zip files

References

External links from the advisory. They lead to third-party sites.